formatting
parent
f1191fb0f5
commit
9a6066b071
|
@ -271,26 +271,27 @@ irc.freenode.net](https://kiwiirc.com/client/irc.freenode.net/openkeychain))
|
||||||
|
|
||||||
## Revocation Certificates
|
## Revocation Certificates
|
||||||
**Brief explanation:** Revocation certificates are used to revoke a key
|
**Brief explanation:** Revocation certificates are used to revoke a key
|
||||||
even if the secret key is no longer accessible (either the actual key has
|
if the secret key is no longer accessible (either the actual key has
|
||||||
been lost or its password forgotten), and is usually the last recourse in
|
been lost or its password forgotten), and is usually the last recourse in
|
||||||
such cases. This task would involve allowing OpenKeychain to both generate
|
such cases. This task would involve allowing OpenKeychain to both generate
|
||||||
and use revocation certificates.
|
and use revocation certificates.
|
||||||
|
|
||||||
The two components:
|
The two components:
|
||||||
1. Creation: Allowing users to create a revocation certificate for a given key
|
<ol>
|
||||||
from within OpenKeychain (this would involve saving the revoked public key).
|
<li> *Creation*: Allowing users to create a revocation certificate for a given
|
||||||
2. Application: Revocation certificates come in two forms - as a revoked public key,
|
key from within OpenKeychain (this would involve saving the revoked public key).
|
||||||
|
<li> *Application*: Revocation certificates come in two forms - as a revoked public key,
|
||||||
and much less frequently, as a detached revocation signature. In the case of
|
and much less frequently, as a detached revocation signature. In the case of
|
||||||
the latter the certificate must first be applied to the correct public key before
|
the latter the certificate must first be applied to the correct public key before
|
||||||
proceeding. In either case, the revoked key must be uploaded to keyservers to
|
proceeding. In either case, the revoked key must then be uploaded to a keyserver to
|
||||||
complete the revocation process. The revocation and upload should be atomic.
|
complete the revocation process. The revocation and upload should be atomic.
|
||||||
|
</ol>
|
||||||
|
|
||||||
This is a smaller task which we expect to take only one or two weeks, which
|
This is a smaller task which we expect to take only one or two weeks, which
|
||||||
makes it suitable as a secondary goal and providing a change of pace for some
|
makes it suitable as a secondary goal and providing a change of pace for some
|
||||||
time while working on another task.
|
time while working on another task.
|
||||||
|
|
||||||
**Expected results:** Support for detached signatures in the Encrypt/Decrypt
|
**Expected results:** Support for both generating revocation certificates in OpenKeychain and importing, applying and uploading existing revocation certificates.
|
||||||
dialog.
|
|
||||||
|
|
||||||
**Priority:** low
|
**Priority:** low
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue